Blog
As organizations increasingly migrate their operations online, ensuring the security
of web applications has become a primary concern. Cyber threats are evolving, and
security professionals must leverage efficient tools to safeguard their applications and
data. So today, I thought we’d go over when to use AWS WAF (Web Application Firewall)
to best effect, a service that offers application-level protection and helps mitigate cyber threats.
AWS WAF: An Overview
AWS WAF protects web applications from common web exploits that could affect application
availability, compromise security, or consume excessive resources. In addition,
it gives you control over the HTTP and HTTPS requests that reach your application. By
defining customizable web security rules, you can allow, block, or monitor (count)
web requests based on your specified conditions.
Jun 8, 2023
Blog
In a recent post, I shared details of the AWS Security Audit program offered by Curious Orbit.
Today I want to show you how this program helped a real customer.
3rd party validation to verify security requirements
CASHiQ is a FinTech startup company based in Hamilton, Canada. The company produces a third party application that financial advisors can use to improve efficiency through online interactions.
For example, the app can be used to store documents, share portfolio information, and even correspond with clients in real time. However, because this app enables sharing of sensitive client data, CASHiQ
knew it must ensure that it met the extremely high-security standards to be adopted by financial institutions.
Jun 2, 2019
Blog
Today, let’s talk about security — of your AWS account and cloud infrastructure. If it keeps you up at night, you’re not alone. Many business leaders struggle with the notion of audits, or the security of their account.
For instance, maybe you’re thinking about the increasing trend of cyber attacks, which have become more prominent in recent years. Many high-profile organizations have revealed network compromises that led to customer information being stolen or, at minimum, placed at serious risk.
Feb 7, 2019
